available for internships & junior roles · 2027

RoudaynaKouka

~/Cloud Engineer

I design secure CI/CD pipelines, provision cloud infrastructure as code and run GitOps on Kubernetes. Air-gapped Azure DevOps releases at Inetum, a Terraform-built GCP data platform at Pulse, EKS clusters of my own. And I write the application code too.

Explore my DevOps work Experience & attestations
move your mouse · it reacts
Portrait of Roudayna Kouka
Roudayna Koukacloud · devops · devsecops
about me

Security meets scale, automated.

I'm a final-year Software Engineering student specializing in Cloud, DevOps and DevSecOps: pipelines with security gates built in, infrastructure as code, containers, GitOps and observability from day one.

I came from development (MERN, Spring Boot, .NET, deep learning), so I build platforms with the developer in mind. I also run NLP research on CVE vulnerabilities and co-founded the EdTech startup CarthaPlay.

● live from tunisUTC+1
--:--:00
Tunis, Tunisia · open to remote & relocation
TUN → U.S.PULSE · remote
TUN → DEAbinway · remote
netflix-devsecops / main · run #482 running
  1. checkoutgit · main0.8s
  2. builddocker41s
  3. sonarqubequality gate18s
  4. owasp dep-check0 high22s
  5. trivy scan0 critical12s
  6. push → ecr9s
  7. argocd synceks/prod6s
roudayna@cluster:~
$
NAME · STATUSCOUNT
internshipsCompleted4
first-placesWinning3×
certificationsVerified18
cloudsAWS · Azure · GCP3
● 4/4 readyage: 2022→now
leadership & community4 roles
Vice PresidentATIA Club FST09/2025 – now
DevOps InstructorIEEE CS Chapter FST10/2025 – now
Senior Business Dev, R&DOptima Junior Entreprise10/2024 – now
Co-founder & CMOCarthaPlay02/2024 – now
currently
Causal relations in CVE descriptions

BERT classifier on 383 hand-annotated CVEs. Manuscript in progress.

languages4
Arabic
native
French
bilingual
English
B2
German
B1
skills

The full DevOps loop, end to end.

Every stage of the lifecycle with the tools I use there. Tap a stage on the loop or drag to spin it. Security runs through all eight.

DevOpsdrag to spin
stage 03 / 08 · dev
Build

DevSecOps in every stage: SonarQube · Trivy · OWASP Dependency-Check · OPA/Rego · TLS/mTLS · least-privilege IAM · supply-chain security

AI & Machine Learning

LLMsRAGAI AgentsNLPBERTReinforcement LearningMLOps / LLMOpsComputer Vision

Development

PythonGoC# / .NET 8Java · Spring BootNode.jsReact · TypeScriptFastAPIKafkaMongoDBC++

Security & Observability

SonarQubeTrivyOPA / RegoTLS / mTLSSecurity auditingPrometheusGrafanaLinux
experience

Where I've shipped.

Every internship comes with its signed attestation. Open it here or download the PDF.

// industry
IN
Inetum Tunisia
Microsoft Department
07/2026 – 08/2026
Tunis · on-site

DevOps & Software Engineering Intern

  • Designed and deployed three Azure DevOps Server CI/CD pipelines for Dynamics 365/Dataverse, data migration, and .NET 8 API deployment to IIS, cutting deployment time by 40% and enabling fully offline, on-premises releases.
  • Automated validation, packaging, backup, restoration, health checks and rollback across all pipelines.
  • Built an internal .NET 8 developer tool, the CRM ALM dashboard, centralizing deployment management, Git-based versioning, solution analysis and pipeline orchestration.
Azure DevOps ServerYAMLPowerShell.NET 8 · C#ASP.NET CoreIISDynamics 365SonarQubeGit
Download PDF
PU
PULSE
Software-OS Department
06/2026 – 09/2026
U.S. · remote

Software Engineering Intern, Cloud & DevOps

  • Provisioned PulseCORE, a cloud-native data platform on GCP with Terraform: BigQuery, Cloud Storage, IAM, Secret Manager, Artifact Registry, Cloud Run and Cloud Scheduler.
  • Configured CI/CD and deployment infrastructure: Cloud Run service accounts, Artifact Registry images, and Cloud Scheduler for secure endpoint invocation.
  • Built storage and ingestion: GCS object versioning, lifecycle retention, a multi-source landing bucket, BigQuery partition pruning and Redis caching for the feature store.
  • Owned security and disaster recovery: least-privilege IAM, Secret Manager integration and automated backups.
GCPTerraformIaCBigQueryCloud RunIAMSecret ManagerRedisCI/CD
Download PDF
PX
Pixemantic
Software Department
06/2025 – 08/2025
Tunis · Technopark El Ghazela

Full-Stack Developer Intern

  • Built App4Doctors, a MERN-stack telemedicine platform, across the full cycle: UI/UX, visual identity, frontend and backend.
  • Integrated a deep-learning OCR engine for medical documents, AI-assisted medical note generation, and a chatbot assistant.
ReactNode.jsExpressMongoDBOCRREST APIsUI/UX
Download PDF
AB
Abinway
Marketing Department
10/2024 – 03/2025
Germany · remote

Marketing Intern

  • Six months in the North African Marketing Team, supporting outreach to students and professionals planning a move to Germany.
  • Created targeted content and worked daily in a multicultural, fully remote team.
Content strategyOutreachInternational team
Download PDF
// research
NLP
University of Tunis El Manar
Faculty of Sciences of Tunis
05/2026 – present

Research Intern, Cybersecurity NLP

  • Designing an NLP pipeline for event extraction, temporal ordering and causal relation classification in CVE vulnerability descriptions.
  • Built and manually validated an annotated dataset of 383 CVE descriptions in Label Studio.
  • Trained and evaluated a BERT-based binary classifier for causal event relations. Co-authoring a manuscript for a peer-reviewed AI / Security / NLP venue.
BERTPythonNLPCVE / NVDLabel Studio
CP
CarthaPlay
EdTech startup
01/2024 – 04/2026

Research Contributor, RL for Adaptive Learning

  • Explored a reinforcement-learning approach that uses students' answers and in-game actions to estimate learning progress and adapt content.
  • Designed an adaptive questioning mechanism that selects and reformulates questions from the estimated learning state.
Reinforcement LearningPythonReact.js
projects

Built and shipped, DevOps first.

Delivery platforms and security pipelines lead. AI and full-stack work follow, because I build the apps I deploy.

★ flagship · secure cloud-native devsecopsAWS EKS · us-east-1

Secure Cloud-Native DevSecOps Platform

A security-by-design platform on AWS: private-by-default infrastructure in Terraform, a Jenkins pipeline with blocking security gates, and GitOps delivery to EKS.

Terraform→GitHub→Jenkins→SonarQube→OWASP DC→Trivy fs→Docker→Trivy image→ECR→Helm tag→Argo CD
  • AWS infrastructure in Terraform: VPC with private subnets, NAT gateway, Amazon EKS, encrypted RDS for MySQL with a Multi-AZ standby, and IAM roles.
  • Jenkins pipeline on every push with SonarQube quality gates and Trivy scans of dependencies, IaC and container images; immutable image tags in Amazon ECR.
  • Helm deployments delivered by Argo CD GitOps; Prometheus, Grafana and Alertmanager for monitoring and alerting.
  • Security by design: nodes in private subnets, secrets in Secrets Manager encrypted with KMS, TLS enforced to MySQL, non-root read-only pods, NetworkPolicies.
AWS EKSTerraformVPCRDS MySQLIAMSecrets ManagerKMSJenkinsSonarQubeTrivyECRHelmArgo CDPrometheusGrafana
GitHub ↗
★ flagship · infrastructure automationAWS EKS

Cloud-Native Infrastructure Automation & DevSecOps

An expense tracker (React + Node.js) taken from git push to a Grafana dashboard: automated AWS infrastructure, gated CI and GitOps delivery on EKS.

GitHub→Jenkins→Test & build→SonarQube→Quality gate→Trivy fs→Docker→Trivy image→ECR→GitOps promote→Argo CD
  • Provisioned with Terraform: private subnets with NAT, Amazon EKS, KMS-encrypted RDS for MySQL, ECR repositories, ALB, ACM and IAM roles, with S3 remote state.
  • Jenkins CI with SonarQube quality gates and Trivy scans of dependencies, IaC and images before publishing to Amazon ECR (scan on push, immutable tags).
  • Helm deployments and Argo CD auto-sync with self-heal; frontend and backend with HPA, probes and non-root containers; Prometheus, Grafana and Alertmanager.
AWS EKSTerraformRDS MySQLAWS KMSIAMJenkinsSonarQubeTrivyECRHelmArgo CDAlertmanagerReactNode.js
GitHub ↗
★ flagship · ci/cd automationJenkins → Ansible → K8s

Automated Infrastructure Provisioning & Kubernetes Deployment

Git push→GitHub→Jenkins→Maven→WAR→SSH→Ansible→Docker→Docker Hub→K8s
  • Jenkins jobs build on every push with Maven and hand the WAR artifact over SSH to an Ansible control node.
  • Ansible playbooks build and push versioned Docker images (Tomcat + WAR) to Docker Hub, then deploy them.
  • Three deployment targets: direct WAR deploy on Tomcat, a container on a Docker host, or a Kubernetes Deployment and Service with self-healing replicas and rolling updates.
JenkinsAnsibleMavenDockerDocker HubTomcatKubernetes
GitHub ↗
★ flagship · devsecopsAWS EC2 → K8s

Netflix Clone · End-to-End DevSecOps

GitHub→Jenkins→SonarQube→OWASP DC→Trivy fs→DockerHub→Trivy image→ArgoCD · K8s
  • Containerized app on AWS EC2 (Ubuntu 22.04) with build-time API key injection; Jenkins pipeline from checkout to deployment.
  • Security gates: SonarQube quality gate, OWASP Dependency-Check, Trivy filesystem and image scans.
  • Prometheus with Node Exporter and Jenkins metrics, Grafana dashboards, email notifications, then Kubernetes with Helm and ArgoCD GitOps.
DevSecOpsTrivyOWASP Dependency-CheckSonarQubeJenkinsGrafana
GitHub ↗
★ flagship · cloud-native devsecopsAWS EKS

Three-Tier App on EKS · Full DevOps Pipeline

React / Node.js / MongoDB application shipped to AWS EKS through a secured CI/CD pipeline and GitOps, from Terraform to monitored pods.

Terraform→Jenkins→SonarQube→Dependency-Check→Trivy fs→Docker→ECR→Trivy image→ArgoCD→EKS
  • Jenkins server provisioned with Terraform; the pipeline runs code quality analysis, dependency check and file scan, builds the Docker image, pushes it to a private ECR repo and scans it there.
  • The pipeline updates the deployment file in GitHub and ArgoCD syncs it to EKS: frontend, backend and database tiers behind services and an ingress.
  • Application Load Balancer with a custom domain, ECR and DB secrets in Kubernetes, persistent volumes for MongoDB.
  • Cluster monitoring with Prometheus + Grafana installed through Helm; IAM-secured access throughout.
AWS EKSTerraformJenkinsECRArgoCDHelmSonarQubeTrivyPrometheusGrafana
GitHub ↗
awards

Three hackathons, three first places.

Pitched, defended in front of juries, and won in 2026.

Receiving the 1st Winner Open Challenge cheque at AI Night Challenge 2026
🥇 1st Place · Open Challenge

AI Night Challenge 2026

Organized by ARSII, the Association of Scientific Research & Innovation in Computer Science. We presented our idea, defended our vision in front of the jury, and took first prize. A reward for the work, and a push to keep learning and building.

1stOpen Challenge
3000 DTprize
06/2026Tunis
NEXT by BH Assurance hackathon winners

1st Place · NEXT by BH Assurance

Agentic AI platform for insurance client engagement, pitched with a live demo.

BH Insurance · 04/2026
1st

1st Place · D-Clickathon

Hackathon organized by the Digital Learning Lab (DAAL).

DAAL · 01/2026
certifications

Credentials, verifiable.

18 certifications across cloud, security, AI and more. Click a card to view it.

media & community

Beyond the terminal.

On air, on stage, and organizing the events that bring Tunisia's tech community together.

contact

Let's ship something beautiful.

I'm looking for Cloud, DevOps, DevSecOps and platform engineering internships or junior roles, in Tunisia, remote, or abroad.

emailroudayna.kouka@etudiant-fst.utm.tn
linkedinin/roudayna-kouka-10005a298
open ↗
githubgithub.com/roudayn-kouka
open ↗
phone+216 28 438 581
QR code to Roudayna Kouka's contact card

Scan for my contact card, all links in one place.

Download CV (PDF)